Senior Identity Security Architect, Active Directory (Remote, Contract)
- Location
- Minneapolis, MN (Remote)
- Listed
- 18 days ago
What You Will Do
- Assess and harden enterprise Active Directory environments, including forests, trusts, Kerberos, Group Policy, permissions, and delegation
- Secure Active Directory Certificate Services (ADCS) and remediate certificate-based attack paths
- Design and implement Tier 0 protection, including administrative tiering, privileged access workstations, and least privilege
- Identify and remediate attack paths, credential theft exposure, and lateral movement risk
- Secure hybrid identity between Active Directory and Microsoft Entra ID, including strong authentication and Conditional Access
- Implement Just-in-Time and Just-Enough Access to reduce standing privilege
- Plan and test Active Directory forest recovery and ransomware resilience
- Secure service accounts and other non-human identities
What You Bring
- Extensive hands-on experience securing Active Directory in large enterprise environments
- Deep knowledge of ADCS, Kerberos, Tier 0 design, and privileged access
- Experience with tools such as BloodHound, PingCastle, Purple Knight, Semperis, or Microsoft Defender for Identity
- Strong experience with Microsoft Entra ID and hybrid identity
- Ability to explain technical risk clearly to client stakeholders
Nice to Have
- Identity governance (SailPoint, Saviynt, or Entra ID Governance), including access reviews and joiner, mover, leaver automation
- Privileged access management tools such as CyberArk or BeyondTrust
- Experience integrating identity telemetry with XDR or threat hunting
- Certificate and cryptographic modernization or quantum readiness planning
- Certifications such as SC-100, SC-300, CRTP, CRTE, OSCP, or CISSP
Details
- Contract role, W2 or 1099
- Fully remote, US-based
- Long-term engagement
About Stafford Gray
Stafford Gray is hiring several Senior Identity Security Architects on behalf of a global identity security consultancy. These are long-term, fully remote contract roles for experts who know Active Directory at its deepest level and want to solve hard identity security problems for large enterprises. Occasional travel for client meetings may be required, typically a few times per year.
We are looking for top-tier technical talent. This role is focused on hands-on architecture and remediation, not people management. Compensation is highly competitive and based on experience.
From Stafford Gray's careers page, first listed on Rolev.ai on October 23, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Senior Identity Security Architect, Active Directory (Remote, Contract) role at Stafford Gray, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
- Senior Identity Governance EngineerServiceTitan · US Remote
- Senior Identity Platform Engineer (Okta, passkeys and identity verification)Nscale · New York City, NY
- Senior Identity Access Management EngineerWintrust · Rosemont, IL
- Senior Identity EngineerIgnite IT · Silver Hill, MD
- Senior Identity & Access Management (IAM) Risk AdvisorFannie Mae · Plano, TX
- Senior Identity & Access Management (IAM) EngineerRepligen · Remote - Massachusetts
Common questions
Where is the Senior Identity Security Architect, Active Directory (Remote, Contract) job at Stafford Gray located?
Yes, this Senior Identity Security Architect, Active Directory (Remote, Contract) opening at Stafford Gray is listed as Minneapolis, MN (Remote). Always check Stafford Gray's application page for specific state eligibility or relocation policies.
How do I apply for the Senior Identity Security Architect, Active Directory (Remote, Contract) position at Stafford Gray?
This listing links directly to Stafford Gray's Workable application page. You can apply directly on Stafford Gray's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Workable application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.